CYBERSECURITYTRACKER
Permanent story citation

ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7199

As cited

Copy frozen at (site build).

regulatory

ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities

The European Union Agency for Cybersecurity (ENISA) activated the Cyber Resilience Act (CRA) Single Reporting Platform on September 11, 2026, coinciding with the law's mandatory reporting obligations. Manufacturers and product vendors placing digital goods on the EU market now submit actively exploited vulnerability and severe incident reports through this centralized portal, which ENISA operates under Article 16 of the CRA.

Why it matters: Vendors and manufacturers selling products with digital elements in the EU must immediately begin using this platform to report vulnerabilities and incidents or face non-compliance with CRA requirements.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary